How to Remove a Suspicious Browser Extension

Difficulty
Beginner
Tested on
Google Chrome 126.0 - macOS Sequoia
You will need
Access to browser settings, Admin privileges

Step by step

  1. 30 sec

    Open the Extensions management page

    Launch your web browser. Click the three-dot menu icon in the top-right corner, select Extensions, and click Manage Extensions to view all installed software.

    Note: Alternatively, type chrome://extensions in the address bar and press Enter.
  2. 1 min

    Identify unauthorized extensions

    Scan the list for extensions you do not recognize or those you did not explicitly install. Pay close attention to extensions with names referencing system tools, PDF converters, or unsolicited search providers.

    Note: If an extension is installed by your organization, it cannot be removed here.
  3. 30 sec

    Disable and remove the suspicious item

    Toggle the switch to the off position to immediately disable the suspicious extension. Once disabled, click the Remove button, then confirm the action in the browser dialog prompt.

    Note: Disabling first prevents the extension from communicating with its server during the removal process.
  4. 1 min

    Clear browser cache and cookies

    Navigate to Settings, then Privacy and Security. Select Clear Browsing Data and choose the All time timeframe. Ensure Cookies and other site data and Cached images and files are checked, then click Clear data.

    Note: This prevents leftover trackers associated with the malicious extension from persisting.
  5. 1 min

    Reset browser search engine settings

    Go to Settings and select Search engine. Verify that your preferred search provider is selected and remove any unfamiliar search engines from the Manage search engines and site search list.

    Note: Malicious extensions often hijack your default search engine to redirect traffic.
  6. 30 sec

    Restart your browser

    Quit your browser completely by pressing Command + Q on macOS or Alt + F4 on Windows. Reopen the application to ensure all changes are applied to your active profile.

    Note: A full restart clears the volatile memory used by the browser process.